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earned patent term adjustment See 37 CFR 1 .704(b). 

Status 

Responsive to communication(s) filed on 25 October 2007 , 
2a)\3 Tliis action is FINAL. 2b)S This action is non-final. 

3) 0 Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11. 453 O.G. 213. 
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4) M Claim(s) 1-16 is/are pending in the application. 
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5) 0 Claim(s) is/are allowed. 

6) ^ Claim(s) 1-16 is/are reiected. 
?)□ Claim{s) is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 
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10) 0 The drawing(s) filed on is/are: a)D accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) 0 The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
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DETAILED ACTION 
Continued Examination Under 37 CFR 1. 1 14 

1 . A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.1 14. Applicant's submission filed on 
10/25/2007 has been entered. 

This Office Action is responsive to the Applicant's Amendment filed 10/1 1/2007. 
Claims 8 and 16 are amended. 
Claims 1-16 are pending. 

Response to Arguments 

2. Applicant's arguments with respect to claims 8 and 16 have been considered but 
are moot in view of the new ground(s) of rejection. 

Applicant argues, "Applicant submits that the Examiner has failed to establish a 
proper case of obviousness in the §1 03(a) rejection of claims 1, 2, 4-6, 9, 10 and 12-14 
over Cramer and Faucher, in that the Cramer and Faucher references, even if assumed 
to be combinable, fall to teach or suggest all the claim limitations, and in that no cogent 
motivation has been identified for combining the references or modifying the reference 
teachings to reach the claimed invention" (Page 2 of Remarks). 
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Examiner respectfully disagrees with this contention. In response to applicant's 
argument that there is no suggestion to combine the references, the examiner 
recognizes that obviousness can only be established by combining or modifying the 
teachings of the prior art to produce the claimed invention where there is some 
teaching, suggestion, or motivation to do so found either in the references themselves 
or in the knowledge generally available to one of ordinary skill in the art. See In re Fine, 
837 F.2d 1071, 5 USPQ2d 1596 (Fed. Cir. 1988) and In re Jones, 958 F.2d 347, 21 
USPQ2d 1941 (Fed. Cir. 1992). In this case, Cramer's reference and Faucher's 
reference are analogous arts. They both specifically disclose to how to secure 
communications by using the cryptographic system that can support the motivation to 
combine the Cramer's teaching with Faucher's teaching to establish the limitations of 
Claim 1 that provides secure communications conducted over insecure channels 
(Faucher, col. 1, lines 13-15). Furthennore, it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to have incorporated 
Faucher's reference within Cramer to include wherein the assistance comprises an 
exchange of information between the first party device and the second party device 
separate from the sending of the ciphertext from the second party device to the first 
party device. One of ordinary skill in the art would have been motivated to do this 
because it would secure communications conducted over Insecure channels using 
pubic-keys method (Faucher, col. 1, lines 13-15). 
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Applicant argues, "No where does Cramer teach or suggest the recited limitation 
of 'generating in the first party device a plaintext corresponding to the ciphertext based 
on assistance from the second party device, wherein the assistance comprises an 
exchange of information between the first party device and the second party device 
separate from the sending of the ciphertext from the second party, device to the first 
party device.' Again, as noted-above, the first and second devices can jointly decrypt a 
ciphertext, but neither can decrypt a ciphertext alone, such that the first and second 
devices communicate with each other to decrypt the ciphertexts, which Cramer does not 
disclose" (Page 3 of Remarks). 

Examiner respectfully disagrees with applicant. Examiner would like to point out 
that the applicant made a mistake to the above argument. Claims 1 is rejected under 35 
U.S.C. 103(a) unpatentable over Cramer and Faucher. Cramer explicitly discloses the 
step of generating in the first party device a plaintext>corresponding to the ciphertext 
based on assistance from the second device, (Col. 8 line 25 to Col. 10 line 5) {Section 
IV teaches a verification steps to check the received ciphertext. Section V teaches steps 
of decrypting the received and verified ciphertext with the assistance of the sender} 
(Cramer and Shoup cryptographic system invention). 

Cramer explicitly does not disclose "wherein the assistance comprises an 
exchange of information between the first party device and the second party device 
separate from the sending of the ciphertext from the second party device to the first 
party device." 
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However, Faucher explicitly discloses wherein the assistance comprises an 
exchange of information between the first party device and the second party device 
separate from the sending of the ciphertext from the second party device to the first 
party device (col. 3, lines 5-50). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to have incorporated Faucher's reference within-Cramer to 
include wherein the assistance comprises an exchange of information between the first 
party device and the second party device separate from the sending of the ciphertext 
from the second party device to the first party device. One of ordinary skill in the art 
would have been motivated to do this because it would secure communications 
conducted over insecure channels using pubic-keys method (Faucher, col. 1, lines 13- 
15). 

In response to applicant's argument that the references fail to show certain 
features of applicant's invention, it is noted that the features upon which applicant relies 
(i.e.; the first and second devices can jointly decrypt a ciphertext, but neither can 
decrypt a ciphertext alone, such that the first and second devices communicate with 
each other to decrypt the ciphertexts) are not recited in the rejected claim(s). Although 
the claims are interpreted in light of the specification, limitations from the specification 
are not read into the claims. See In re Van Geuns, 988 F.2d 1 181, 26 USPQ2d 1057 
(Fed. Cir. 1993) 

For at least the above reasons, it is believed that the rejection is maintained. 
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Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which fomns the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary sl<ill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1-2, 4-6, 8-9-10, 12-14, and 18 are rejected under 35 U.S.C. 103(a) as 

being unpatentable over Cramer et al, (US Patent No. 6,697,488) hereinafter Cramer in 

view of Faucher (US Patent No. 5,515,441) hereinafter Faucher. 

As per claims 1 and 9, Cramer discloses a method for use in a device associated 
with a first party for decrypting a ciphertext according to a Cramer-Shoup based 
encryption scheme (Col. 6 lines 10-15), the method comprising the steps of: 

obtaining the ciphertext in the first party device sent from a device associated 
with a second party (Col. 8, lines 25-35, encrypted plaintext); and 

generating in the first party device a plaintext corresponding to the ciphertext 
based on assistance from the second device, the plaintext representing a result of the 
decryption according to the Cramer-Shoup based encryption scheme (Col. 8 line 25 to 
Col. 10 line 5) { Section IV teaches a verification steps to check the received ciphertext. 
Section V teaches steps of decrypting the received and verified ciphertext with the 
assistance of the sender} (Cramer and Shoup cryptographic system invention). 



Application/Control Number: 10/600,687 Page? 
Art Unit: 2135 

Cramer does not disclose "wlierein the assistance comprises an exchange of 
infonnatlon between the first party device and the second party device separate from 
the sending of the ciphertext from the second party device to the first party device." 

However, Faucher explicitly discloses wherein the assistance comprises an 
exchange of Infomiation between the first party device and the second party device 
separate from the sending of the ciphertext from the second party device to the first 
party device (col. 3, lines 5-50). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to have incorporated Faucher's reference within Cramer to 
include wherein the assistance comprises an exchange of information between the first 
party device and the second party device separate from the sending of the ciphertext 
from the second party device to the first party device. One of ordinary skill in the art 
would have been motivated to do this because it would secure communications 
conducted over insecure channels using pubic-keys method (col. 1, lines 13-15). 

As per claims 8 and 16, Cramer discloses a method for use In a device 
associated with a first party for assisting In decrypting a ciphertext according to a 
Cramer-Shoup based encryption scheme, the method comprising the steps of: 

receiving a request generated In and transmitted by a second party device for the 
partial assistance {the partial assistance is the steps to verify the ciphertext before going 
through the decryption process in section V) of the first party device In decrypting the 
ciphertext according to the Cramer-Shoup based encryption scheme (Col. 8, line 38 - 
Col. 9, line 25); and 
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generating results in the first party device based on the partial assistance 
provided thereby for use In the second party device to complete decryption of the 
ciphertext" (Col. 8 line to Col. 10 line 5) { Section IV teaches a verification steps to 
checl< ttie received ciphertext. Section V teaches steps of decrypting the received and 
verified ciphertext with the assistance of the sendei) {Cramer and Shoup are the 
inventors of this prior art) (Col. 8 line 25 to Col. 10 line 5). 

Cramer does not disclose '\vherein the assistance comprises an exchange of 
information between the first party device and the second party device separate from 
the sending of the ciphertext from the second party device to the first party device." 

However, Faucher explicitly discloses wherein the assistance comprises an 
exchange of infonnation between the first party device and the second party device 
separate from the sending of the ciphertext from the second party device to the first 
party device (col. 3, lines 5-50). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to have incorporated Faucher's reference within Cramer to 
include wherein the assistance comprises an exchange of information between the first 
party device and the second party device separate from the sending of the ciphertext 
from the second party device to the first party device. One of ordinary skill in the art 
would have been motivated to do this because it would secure communications 
conducted over insecure channels using pubic-keys method (col. 1, lines 13-15). 

As per claims 2 and 10, Cramer and Faucher disclose the limitations of Claims 1 
and 9. Cramer further discloses wherein the generating step further comprises an 
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exchange of information between the first party device and the second party device 
whereby at least a portion of the information is encrypted using ari encryption technique 
such that one party encrypts information using its own public key and another party can 
not read the infonnation but can use the information to perfomi an operation" in (Col. 7 
lines 1-40, and Col. 9 lines 25-45) {The public key is g1, g2, c, d, and h. The exchanged 
information is z}. 

As per claims 4 and 12, Cramer and Faucher disclose the limitations of Claims 1 
and 9. Cramer further discloses wherein the generating step further comprises: 

generating a share of a random secret (Col. 7, lines 1 1-19); 

generating infomnation representing encryptions of a form of the random secret, a 
share of a private key, and the ciphertext (Col. 7 lines 10-27) {private key Z, and the 
random group}; 

transmitting at least the encrypted information to the second party device" (Col. 
6, lines 46-57); and 

computing the plaintext based at least on the share of the random secret, the 
share of the private key, the ciphertext, and the data received from the second party 
device (Figure 3, Col. 9 lines 25-50). 
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As per claims 5 and 13. Cramer and Faucher disclose the limitations of Claims 1 
and 9. Cramer further discloses wherein the first party dievice and the second party 
device additively share components of a private key" in (Col. 7 lines 10-15, and Col. 9 
lines 35-40). 

As per claims 6 and 14, Cramer and Faucher disclose the limitations of Claims 1 
and 9. Cramer further discloses wherein the generating step further comprises 
generation and exchange of proofs between the first party device and the second party 
device that serve to verify operations peri'ormed by each party" in (Col. 8 line 38 to Col. 
9 line 23). 

4. Claims 3, 7, 11, and 15 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Cramer and Faucher and further in view of Ronald Cramer et al, 
"Multiparty Computation from Threshold Homomorphic Encryption". 

As per claims 3 and 11, Cramer and Faucher disclose the limitations of Claims 1 
and 9. Cramer and Faucher do not disclose "wherein the generating step further 
comprises an exchange of information between the first party device and the second 
party device whereby at least a portion of the information is encrypted using an 
encryption technique having a homomorphic property." 

However, Ronald Cramer discloses wherein the generating step further 
comprises an exchange of information between the first party device and the second 
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party device whereby at least a portion of the information is encrypted using an 
encryption technique having a homomorpliic property (page 18). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to have incorporated Ronald Cramer's reference within 
Cramer and Faucher to include the encryption technique having a homomorphic 
property. One of ordinary skill in the art would have been motivated to do this because it 
would secure communications conducted over insecure channels (col. 1. lines 13-15). 

As per claims 7 and 1 5, Cramer and Faucher disclose the limitations of Claims 1 
and 9. Cramer and Faucher do not disclose wherein the proofs are consistency proofs 
based on three-move SIGMA-protocols. 

However, Ronald Cramer discloses wherein the proofs are consistency proofs 
based on three-move SIGMA-protocols the proofs are based on three move SIGMA. 
Protocols (page 13). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to have incorporated Ronald Cramer's reference within 
Cramer and Faucher to include the proofs are based on three move SIGMA, protocols. 
One of ordinary skill in the art would have been motivated to do this because it would 
secure communications conducted over insecure channels (col. 1, lines 13-15). 
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5. Any Inquiry concerning this confimunication or earlier communications from tlie 
examiner should be directed to Baotran N. To whose telephone number is 571-272- 
8156. The examiner can nonnaily be reached on Monday-Friday from 8:00 to 4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Y. Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Infonnation regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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